Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
File:                     3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=
Subject key identifier:   AC:27:01:8E:8A:E1:E4:86:F0:86:6A:E8:31:B1:D5:9B:30:EE:1A:68
Certificate issuer:       /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial:       458ABDB3CC197ABF263846A718EABEA982138D64
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:42:20 +0000
ROA not before:           Sun 03 May 2026 02:37:20 +0000
ROA not after:            Sun 02 May 2027 02:42:20 +0000
asID:                     48465
IP address blocks:        103.13.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8a:bd:b3:cc:19:7a:bf:26:38:46:a7:18:ea:be:a9:82:13:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
        Validity
            Not Before: May  3 02:37:20 2026 GMT
            Not After : May  2 02:42:20 2027 GMT
        Subject: CN=AC27018E8AE1E486F0866AE831B1D59B30EE1A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:a4:9d:be:28:b0:9e:a5:7c:b9:04:8b:78:
                    8f:a9:8e:74:b5:22:13:fb:cb:1f:09:71:6f:3a:4e:
                    06:40:ad:12:81:c4:59:6e:a0:9d:e9:d9:b0:57:4e:
                    48:94:38:7c:34:d3:d3:13:32:5b:84:fe:cb:67:4c:
                    ec:ed:ef:63:a0:7b:eb:09:88:38:01:5c:1e:67:4c:
                    c1:81:67:85:2e:3b:69:2d:df:96:30:92:b1:b6:33:
                    a6:ee:85:c9:fb:5b:d1:b7:57:18:bf:4c:f0:c8:93:
                    a8:60:62:12:03:36:45:eb:8f:68:0e:31:90:1b:c0:
                    3e:71:32:1c:d8:2c:e4:24:e9:73:4d:67:3a:1e:18:
                    3a:33:79:bf:3d:ec:5c:f0:b5:87:de:91:e8:78:7e:
                    d5:a4:ae:50:6f:dd:fa:e4:e4:b6:48:bb:b7:6d:67:
                    25:e7:ab:31:8f:34:d8:9f:2d:79:8b:69:64:bb:75:
                    c0:c8:65:75:a0:c9:1e:0a:ab:84:bd:25:84:39:7e:
                    b6:cc:7f:f1:47:09:dd:b0:b2:5c:81:f6:e0:79:ec:
                    9c:1b:8e:0c:11:f3:79:5e:39:07:51:d8:91:74:a4:
                    42:bc:ab:e3:fc:d3:c6:18:eb:4b:0e:13:5e:e4:d3:
                    ce:f0:82:22:51:6f:a0:42:df:fd:a0:1f:ed:f3:0b:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:01:8E:8A:E1:E4:86:F0:86:6A:E8:31:B1:D5:9B:30:EE:1A:68
            X509v3 Authority Key Identifier:
                keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:e7:a7:8c:ea:e8:82:77:ac:c5:0b:98:fe:fb:39:42:fe:
         45:57:d8:03:7b:7b:12:4b:cd:58:d2:ee:3f:64:49:53:0e:db:
         31:bb:99:5a:b1:e4:24:50:e4:e8:9e:ec:6c:dd:33:e9:52:27:
         16:a2:d7:20:6d:df:64:e8:15:db:6d:85:bf:c9:9d:b7:e1:d7:
         08:bf:d6:30:04:ce:67:27:99:e8:52:6a:f6:f7:fe:42:13:76:
         be:d5:df:11:d0:ff:3f:ce:25:03:e7:a7:4c:b7:d8:8c:f7:85:
         d9:47:51:d0:b9:d9:4c:94:89:74:d4:35:4c:77:98:10:6a:37:
         30:42:f7:d1:f7:46:50:fa:45:d1:dd:36:3e:09:7e:7c:1d:bb:
         6d:19:49:26:f3:55:2e:df:a3:54:ee:f8:59:2a:cb:4b:69:f7:
         e4:84:6a:55:85:45:c7:8e:7d:00:74:c5:f1:a2:fc:3a:3c:07:
         a3:76:be:2e:a8:e1:53:73:11:c0:87:3a:f9:ff:6a:54:19:c9:
         72:49:97:6d:ee:88:9c:52:ed:67:d0:ad:9c:8a:a7:62:e8:7f:
         96:2d:dc:a2:f5:b5:79:79:1e:25:7f:1f:b4:18:3e:24:a6:75:
         f7:6c:58:c6:ae:c3:08:f8:1f:d0:ee:ba:ec:b8:3c:cf:66:09:
         65:4e:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:55:12 2026 by rpki-client